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U m =ft 



mi/1231 



l. 

2. 

^iJP^^afi^i^W-^^ffl^^^^fffi#-3iiAiiEWDiffie-Helman (DH) ®® 
£&&t3S 0 SiiftftS^, i&»^M£Ht— ftl&^/^W Rivest, Shamir ft Adelman 
(RSA) im^#3*tl»-|ft#§IIIft^W^ (ECC) ffiSfXto H^&f+iAiiE 
Mifffl RSA §EECC^, SjfeS^Wni— B-RTiiE^W*^, MSWf^lfefA 
&1£iRjJK. ^SifW'it^^, ^NMRT^^SSCft^il^^lJjtB (OEM) XrT 

m i ^rmmum^mm-^mmmim^m^m^ ctpm) & 

S4^djTWS2^ TPM ^JPlWit^^^^J^iJtt^M^Jo 
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tt m ^ SI2/12W 



imm^Mmimm Diffie-Heiman %®&&mx*fti^u# t mm&}®& 

&Mtt&ft%.?t&Rm&fe& (CD-ROM) ±#I^BIj5iMaB^M 
^^^^^^f^W«##^Rr^M^:^ 300-700 ^U^/>^ 

m 20 ^i&^^S^fi^iEBJltt Diffie-Heiman ^£&0r^ltt#^5M£# 

^»!j^w#^#tiE> mmnmm^^mmm^-^mmi^o mat, 

in, >hA, 3^ ^#^P/sRS#) c ^^^JF^m^it^^ 
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tt m ^ SI3/12W 



WiXMT 11/27/2002 &&ffy1£ik&&&Wffyfff&&&l%%l "System and Method for 
Establishing Trust Without Revealing Identity ( ffi ^ ^ilff ft M^F^^^ #r ^ W$ 

" m#m##^m*vm 10/306,336 -sw^s. MmvEm^xr^R^ 
^%-^m*#iw&mmmM (F P ub m F P ro . mm F P n, n^^Mk 

*M&-^Mf&R&!&m—toM&vE®fcG&m&® CDPpri) o Efe^lJ DPpri ^ 

mm^mB^smmm'MMFpub^vEo mm, &wmm:mRum^mm^m 
tkf&m&®/fomtt> umm dp fttSf^^^AMfmiB^w^t. m 

^ "nTft¥^^±^" us " tpm " ) &mm¥&%#uttmm&}-^'£ffimo 
102 mmm %tmmm-^& 104 n^^i^w^mwis 

# 106o P|»|jE^if;£ 106, H — 104 JH&#fif;£G<jfs m 108 o 

Jfcttfh ^in3£^tt, 102 BT^fltH^iiE^fif^Wftm 108 *3fcg 

Efe^^W-^^-Mi^^iJitf^ (jn^rffe^ "i&^ffrMr^ 110" ) ^ijatetl^., 

fclft, ^^^W— ^M^J^. i02Mi^m-^^ 104, ^r&^tBK 

%\^m%, M&m—^is 102 104 jcWi^^-fijit^ no ^dcwsffii 

^MW, H— 104 &SW#¥£l£#t(TPM)115oTPM 
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itt m ^ Jfl4/12W 



mtt®M&MmftM'j>mft±&i%&&]*tm&o tpm 115 mmsj&fom-^s 

S2^^TA^"TPM 115 W^-^^ 104 Wm-^»'Jc 
#|, 104 TPM 115 W*bS* 202o — $§:rfos, M3£ 202 ^ 

*t3^sw&#. «r, s^^b^w-^^^j^, &st§ 202 ^«m^Mt3 

«:ffl*202 Rr«[^5R^^riaj|s^^ws2», mvmmmnnnn cfpga) > 

(ttl) TBmm&m^m&j&kR casio . 

jfcb*t, 104 a^#^#-7u 206 W^iW^5^fm, Wn^TW 

#3*17^3^^, &#lttf§m^M#£££ TPM 115 fi<jft!Hi#te«220 
##fi^7G 206o ^#"J.RTMn#. TPM 115 £4W. 

ffl 4 t^jswh 2 #j tpm 115 mmm-tmn^ 300 mmmrn. 
i-tmmm 300 ^©^^ 302 mm^m&m 302 ^&ts^ 3io a itjimm^ 300 & 

^J£3E#j«i|i-7U 304 ^1#^#^S#-7C 306 o 

jlfc&b, ±#^fl#-7U 304 £JB^#te#&#iEiJ*b3* 310 £Mf ift^tfJ^ 

304 fanMT&4itm& 310 mtr^ffifB]#Mi[Sfft^* 

bk^-e * rafts ct«#i« #-76 306 ^ffi^^^xetj#'i4±^^bafi 310 tern 

$LTR&l?tiH& (ROM) o 3£#^^#-7H 304 mm^m^^-7t 306 J^til^S 
302 o 

i£^n.mm-^mm^, \\%mk%t 300 i5^i$p«t^jt4fii# 
308, ^^^^K^^^RTM^Mit^ta^^ 300 ^{g#^t m^p^o 
irmmm 300 -&rt^s^^ 302 m^mmmmm^ 314, tmmimm 
mmm (crt) , i^i^ (lcd) ^fii^^^i^ c*^tB) , 

-M, ^#iffc^fuAi&& 316 (fclftrtfcS:, n5®Lffi&m&*& 302 

wtwii 310 Mmmfa&m&o s-^i^^iAt^M^j 
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itt m ^ SI5/12W 



#-tu 3i8, Tt^nffl^ 1 ifej^a* 310 feffijj&m&mfit^jk&xmT&fflM^m 314 
±^^^w»,#. ib^u tem^> m^m, ^i^^t. 

in, Wjtb^, itlf*nj§^300 RT^fiSSBW^Sfli^, if*n0S*n^ftiF»i& 

amjimn 300 fomm&^m^m. 
300 304 *n/i£*#s#fi£&# 308 ^%-jE&*&m 

%k3\QWimmmfr$& "Rut " mwmtk cmta, mm^m^m^mi^:^ 

Diffie-Hellman (DH) ^#^&&bii„ ^S^^tS.^, T&&&#Be&£— &\J^S/&W 

mifi, mft&ftikvE&m&m rsa m ecc mm, mat^M^m-R^iE 
"cookie" o ^mnu^, &&ft%n&\k%ginmmfc®&Hmo 

-W^&MJjtetf.T 2004 ^W^ih^^f mffi^%m%%l "An 
Apparatus and Method for Establishing an Authenticated Encrypted Session with a 
Device Without Exposing Privacy-Sensitive Information (ffi^'-^^^^Al^.iAijE&tlJtlP 
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tt m ^ JI6/12W 



10/???,???-^ ^ffi^o UJim&TiEi3Jia?&tt«£^i&iA k iiEfi«J 
Diffie-Helman &tS^ RSA ECC ft^Wttffi.'ffiffi&^f'^W^Rrift^liE^Ji 

^+6^^, ^#^wmsnjE^^ (DPpri) »smn®#4$.mfr%L cd m$ 
feTSL&wmmxi&m&ftmto DP P n mss sKig^^w-^ifi^iwffi^ 
&#>mm 502, &&&m±j i *mm 503 w&pftnigiwim 504„ 

WM^^Jir*^JlJf*r o ^£^^503 Rjffi^J3SS#. t^ifcftl*, ^ 
aHJW^«iJ^, ^#^#f^^#6<J#^^tt#^^W^I^mil RAND 508o 

$y^^m^^^m«^ 510 flj^^nB 5i2o f^^tf^gffi 

VJ^fafct&fo%mnik (keyblob) 514 fcj#tfgg&fao 514 ^fi&S^H^&lg 

JMo nt— MiM^ (DPpri) &eWFhiS&ffl;te&Wfl?J®iii^o DP fAWffi^ 
(digest) 516 (DPpri JSl?^3SmigTtiB SHA-1 fi^flHWMi^^ 

few DPpri msiii, ^£«'J nr*jie#i4W g W^te^Wtfc^WttlsiW 

$&ft.l«Ifi (IV) 518 tf^^BgiW— IfltfK ^Pl^jiPfffflM^, JUiJlVffl^. 
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tt m ^ Jfl7/12W 



wmmm cd 522 ±mmmmmm 520 ^-^ss^i*, 

#J$M* CD ±RTl£W£ > N&«8*fe, i*-WPS^JJi CD W»3l#MK*!l. CD^B^ 

# (DVD) sJUTS^M) o 

-fi CD feSA&^mhJftfU^ftJ CDROMSggft* (*^Hi) 
M^ffll:^iiEBjmi*amAijEy^^^^it#m^^ 504 rt^f^M«# 506 

mmm^^m^^mm 504 pt^a cd ±M#e3*fe3Riw 520 m mm^m^ 
5i4 0 ^±^m^nTiji5^-^ffl*^«^w^f!±^ ctuTmm m^mMmvE 
mmz&M, w&mmmm* 526 &^^ftmh%mMjmm\mn%m& 

506o 

gMMmfr&Mmtew^mM^mift&m&Mmm 600, m^^^im 
fpffeijit^p/ra 604 o &mftmt%t0^m 1 mm* mm.&.F&t&fczh&^m s m 

mm*p, &&%\m.^&mm&UFmm 502mm&zhft o £*i702£b, 
fflm.m%&ffl&MM—&&&§i&M&vEwm&®xt cF P ub m F P ro „ ^— m— 

T§i&1&M^~ DPpri DPpri frJStWS^ rT FN Fpub ^iiEo — 

Xd-g^JitW^— filaf 502 I^^Jjjtg 512 mfU 704 ©J 720, 

1f5te, i£*l 704 £t, ^^fg^Pt— ftfitflUI (RAND) 508, ^m¥\^ , 
RAND 128 ££-£&ifiM*, *J fM^^'Mttfto £->h^M#!l 

+ , ^^^^J^^tfl^RTfl^^o £fll706£t, ^^0f^W#-[^®fff, 
^?dt^i^Pi— RANDft^^^^Wn^^l^ SKEY ( SKE Y = f(RAND) ) . \% 

^famm^^Mim^&gMMttnEt^mi («r, sha-u mgfi, «*pw^ 

m (DES) > HfiDES^) o ^ 708 ^b, &—^tfcm*, ^iMgffiil^ffi 
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tt m ^ JI8/12W 



skey#h$ («n, i>io?U) 3fe£*R>»/B J J 1 3IJl#£cD 522 ±& 

514 ift^iiWf (ID) (-g#ID = SKEY (0..0) ) . 

ft*, &Jl710*t, (Fpub) *T*WDPftW« 

sar^ DPprio &m 713 4iS5((iifffla^& (mm, &m sha-i jd^-is: 

^DPpriatf^m^DPpri^o £fl714£b, 
%®1kmffi%jfoo DPpri *P DPpri ^-H^jfiM*. 3f^^5 

a^AW^^^ta.^6tj^e<j^m^m[R]*o a^Rr^ffl skey 2jq&ta 

^^n^^J^^514o £}g716£b, £*I 708 £b£/&#jT&& ID ifn&Jg 714 &b£ 

f&toM\®&}&®ik 5 14 w«[#^^a?^*fe«[jg^ 520 * w-^ a * w^M^^f^ 

^CD 522 0 &-t»Jt, ^^±^m^^^W^@"5XS^IDj|^ 0 M718 

£b, mmM rand {tnTM^f^Sf^^fr^^ 510 +0 &M 720 £t, rTJH!J|& skey 

m DPpri, @^Cl>&Si&&£J«S§r£/&o Bl^nifck^it DPpri il^^Ji^l E±3 
SKEY M ffjRSB WiP^ , DPpri ft ft SKEY tfHf , 

IM^^^Wrtt^M skey 

^■feo #&#1t8l't 1 , DPpri «H?0<I<t^^Jt^Wo 

720 i.mm^nm%, Mi 722 &t, rand {i&^G^gygj^ 

J4±4f?'J^J^^m^ 503, tr^fJ^a^fH]^ RAND {t#^lJi&#|*|o - 

JB^iET^#±#^J5, RAND {t^A^M^^fc 502 *^«o ftjg, 

£*l724£b, M^tiJatWf^&f]^±M«Mt "Mfk" £iJ£^#£cd 

522 ±„ ^-^W'J^F, CDom#^— ^i^ID^I^g^l^, 

m s s^rBmjg^BJW^M^ws^m^^baw^jgs sooo 
^m^mmtt, &m 802 ^m^^mhK^mmmm^^n^mm 
rand {m.o ffimRANDfcmmi$&ftfem&&*mtM!k&ftffift. 

, il#a^t4#'fi|^ TPM. 804 £fc, — B.Xtf RAND ftl^^M^^^jg, 
fflfc&J*%mm2;&9k&%lffi& T ¥T£T£t&ffy RAND ftWttfajia^o itbBt, RAND 
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tt m ^ 319/1231 



^->h#^^^J4i, RAND <tRr^ES#WftiJj£»3^'M, ^^M^it^iJ 

&%-mffiM*, RAND 4l^&iS:3-Jt:£'J*i, J-^^fimSft^^^iT 
DPpri ft^ft^rfe^ DPpri ««A«rtMfc. 

ID, m^TM RAND l£ DPpri Mo 

a 9 s«jg7(csi)iflo^^MMW^Thir^^«sAbaw«ESffl 900, § 

^^IT^iR^iMf&*^^*5l#3R«l6W--*»^. £fl902£b, ^TMftFl* 
^W^IE^^I-^, S#fi<I«#3KSjjgJ^526 RrttiPSi!l±#^«rto 

^a#«^#ft#jf#3*rfritf. «#gg^j®^fli^^«# 506 m^rnm^^- 

308 «f ^WBS#^TiP«fW*tfi4fcaf^524. £RlH^, JJUJ^^f WIS 
SM, MfMl906 4t^ o iPJf^, jmjAha^^.ffi908. £*S908 &h, 

s^ig^^fijfe^ji^r^it^m^wffi^Ms^, m&ffiAfr£iCD 522. 
- h. cd mt^m^^it^js, w&mmmmfeBzh cd ±#te£Kj&ea&^ 

jfe%j\fom, ^ti9io^b, T&&itmn%-famm f rand^i 508 m 

Df^j^^^W^ SKEY (m^f^lf^^ffl) (SKEY = f(RAND) ) „ itfll 912 &fc, 

iz&mBmmm skey^jp^ "s^g" («r, ^tw o *^^pt 

-fti£#IDt*& (i£#ID = ^fflSKEYip^ (0..0) ) „ i£^/5^T&# ID jg 
0^^4Sr^$ffl^#. £*E914£h, ^^^^ffl$fc#^CD±fi<J^^^ffi^ 
520 ^S^^EIE^^ID 6tJ^£$g^@, ^i&&lft#P^^, 

916 £t, i&^ffl^Wtj SKEY Jlff&flq&ftjaF^gi, DPpri *P 

DPpri #m&&&ftmm^M%:&m%* mmm^m^im skeym 

% (IV. DPpri. DPpri ) . WS^tJ^H-tfrfi (IV) ■ £*g 918 £b, 
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Tft Dl U 3S10/12M 



^/hM31 *f DPpri ^Ttfc^J m^^H DPpri WlSfi 1 tfc&^&S DPpri itt^Slte o 

^S3/3C, ^it^lfc^TDP^. IV 2H£J8 

i^if IV^'J^lffWin^^**^^ (M^^ik = ffJ3 SKEY in® (IV2, 
DPpri, DPpri ) . ^^WiP*M*±t!l^a^^«[5SIlI^*^^^2K#. 

(Win, «n^:WS#ffi^& 308) . is&itt DPpri 

-H.^^a^ba^r§]^7 DPpri i&«jnnM DP P ri 0 sioj^ 

^\^, &&M&&m^n& 526 -^mmm^^ & ° m^m^m^mn^ 
it-j^mhiknu, &&w%3MJ¥mfett : && 506 w^s^is^ 308 4»^e& 

^mm^^mitmnm, m&mmmmm ioo6„ £*noo6*b, 

M 1008 Ah, i^^^ffl^#-^iimf/AKAWPvAND{i 508 Sf?^*f^W 
#3 SKEY ( SKEY = f(RAND) ) . £tEl010&b, ia$-iifctt£JB 

X**fc£?^ SKEY &m®Ua&1fy*Mtt t '85®&:, VXt^^L DPpri *P DPpri ffig, 

mMmmm#M*:'&m%* mm^m^=im skey mm av2, DPprk 

DPpri tg^) ) o BT^^B~IU^tB]m (IV2) . £*g 1012 Ah, i£^-ffii±)tf DPpri 

mimmm^H DPpri ^i^rtt&^g DPpri e^sm, ^^im^^ a 

» (»P, J«EEMfl) , m&&&&& DPpri ft^Htr&^etiWSfe&ei. 
^fflo^-fepT^^B^^^S^*, Wm^JJjiik^mT DP^ofti 1014 

Ah, t&#&#x- iv ^ffi^tf iv ^jiif^ira^^^iifcw^fft i^mitm 

m$k = itm SKEY^P^ (IV3> DPpri, DPpri Jffig) ) „ iMjf P^P^lft^i-tM-hW^ 
±feBj«lH]^^^^^ffilfe#o £flll016£fc, ^^^^WiP^fKj^Hk 

^^^#«iJ^it^ta^^rtW#^ c P (Wn, f"J$P^WS#^^-308) o 

i&^w DPpri m&w&&±mm%&^Fi+miiMm* o 
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tt m u Jgii/i2w 



mo 

ttmtfm. &ft&*mxmmi¥. 4fe#aEW#wffl^*». a*tt*RTfflffiRr*g 
^wn#p?m> w^^'e^^^^-, t:a^©^a^> nri^ba*^w# 
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